Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0f14a7f3-330f-3cca-bc2b-4e3103c08b9f.roa
File:                     0f14a7f3-330f-3cca-bc2b-4e3103c08b9f.roa (raw, json)
Hash identifier:          oh4VwH8ZHGqMa/wa6dgZxxy8K7/STfnuskIgf0t23bY=
Subject key identifier:   82:93:63:8B:E3:AE:BC:AE:59:1D:96:19:52:AB:45:44:1A:08:2B:B7
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B50052EB106B93F96DCA400
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0f14a7f3-330f-3cca-bc2b-4e3103c08b9f.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     15290
IP address blocks:        207.245.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:05:2e:b1:06:b9:3f:96:dc:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=8ad3ffbc-2bf7-4156-bf53-d9f351db706e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:89:52:a9:2a:43:29:06:2c:02:cb:59:87:75:
                    28:3f:68:2b:2c:33:54:93:39:f3:85:5b:e1:e9:6d:
                    f3:1c:e1:11:b0:e8:7e:fd:8c:78:9d:88:f8:b7:22:
                    c8:30:62:0f:c7:6c:59:26:dc:47:63:66:af:6c:b8:
                    e6:aa:4f:21:62:34:33:ab:60:14:7e:e0:eb:08:50:
                    82:f4:2d:92:33:cf:f2:93:b5:5a:7d:0d:83:2d:b3:
                    0e:ec:69:60:cd:0e:36:12:5f:fc:43:b9:c2:5c:a7:
                    3b:57:2b:2a:1b:81:8d:48:3a:e5:df:d0:17:26:66:
                    24:08:b4:f3:92:9a:f3:84:01:d6:56:a1:86:fe:57:
                    c9:83:75:c4:cc:40:b1:91:86:19:69:24:2b:3e:9d:
                    ed:60:6f:f4:79:5a:dc:2d:8f:b0:f3:f5:e4:f7:29:
                    09:20:8b:a6:77:26:d4:0b:0b:6d:12:49:9b:aa:83:
                    38:c9:b3:a2:80:5f:47:f2:a9:09:aa:f1:5a:02:b4:
                    88:9b:a3:48:16:79:92:88:06:e1:d4:8f:ae:a1:f6:
                    40:40:e4:0b:dc:a3:9b:d5:d4:fa:cb:93:b1:6b:f5:
                    76:da:fb:77:41:f3:71:63:e1:bb:fa:7e:34:e8:f0:
                    d0:17:ed:7f:0e:e5:c1:09:20:22:b0:9e:a1:4a:ff:
                    2e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:93:63:8B:E3:AE:BC:AE:59:1D:96:19:52:AB:45:44:1A:08:2B:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0f14a7f3-330f-3cca-bc2b-4e3103c08b9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.245.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:59:10:d1:2d:3d:e7:62:2d:c5:67:6d:d7:7c:d9:dd:07:dd:
         18:c8:f3:d0:fd:a1:b5:79:2c:c8:cc:78:74:58:0b:61:91:ea:
         93:07:34:92:f4:c2:f0:4f:99:46:fb:69:b2:da:47:d5:36:aa:
         4c:62:e7:cb:16:0b:90:a0:20:76:dd:8e:4c:84:5e:e5:76:9e:
         35:70:0e:81:4a:d2:d9:6f:fb:2b:e1:72:12:93:34:e7:8f:8d:
         b5:39:c4:5f:67:ed:c0:ef:00:5c:c9:9e:9f:68:70:f2:50:eb:
         c0:64:2d:8e:7a:96:95:3c:67:54:6a:2a:a9:c3:15:03:48:a4:
         9e:93:2c:11:00:a0:a4:c6:78:b7:c1:e7:41:3e:40:86:b1:88:
         5e:05:54:76:65:f9:c6:64:17:0c:50:2d:6e:7d:eb:96:6e:4b:
         2d:72:b8:69:9f:cb:ff:36:58:e9:c0:98:e1:a1:e0:c3:bd:f0:
         73:3c:44:b3:dc:3c:28:1c:12:5b:e0:d2:f5:fd:0c:00:33:10:
         73:9f:c6:f7:cc:d3:b9:56:3f:93:56:33:dd:a8:3a:81:a0:e0:
         87:4e:f3:e8:fc:53:b7:b5:63:0b:fa:d0:9c:98:0d:a2:b7:98:
         fd:43:7a:35:18:b7:87:08:41:f2:7d:8b:52:cc:31:0a:ce:9b:
         b6:1d:a9:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7UAUusQa5P5bcpAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk
OGFkM2ZmYmMtMmJmNy00MTU2LWJmNTMtZDlmMzUxZGI3MDZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIlSqSpDKQYsAstZh3UoP2grLDNUkznzhVvh
6W3zHOERsOh+/Yx4nYj4tyLIMGIPx2xZJtxHY2avbLjmqk8hYjQzq2AUfuDrCFCC
9C2SM8/yk7VafQ2DLbMO7GlgzQ42El/8Q7nCXKc7VysqG4GNSDrl39AXJmYkCLTz
kprzhAHWVqGG/lfJg3XEzECxkYYZaSQrPp3tYG/0eVrcLY+w8/Xk9ykJIIumdybU
CwttEkmbqoM4ybOigF9H8qkJqvFaArSIm6NIFnmSiAbh1I+uofZAQOQL3KOb1dT6
y5Oxa/V22vt3QfNxY+G7+n406PDQF+1/DuXBCSAisJ6hSv8uKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIKTY4vjrryuWR2WGVKrRUQaCCu3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvMGYxNGE3ZjMtMzMwZi0z
Y2NhLWJjMmItNGUzMTAzYzA4YjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/X1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD1ZENEtPediLcVnbdd82d0H3RjI89D9obV5LMjMeHRYC2GR6pMHNJL0
wvBPmUb7abLaR9U2qkxi58sWC5CgIHbdjkyEXuV2njVwDoFK0tlv+yvhchKTNOeP
jbU5xF9n7cDvAFzJnp9ocPJQ68BkLY56lpU8Z1RqKqnDFQNIpJ6TLBEAoKTGeLfB
50E+QIaxiF4FVHZl+cZkFwxQLW5965ZuSy1yuGmfy/82WOnAmOGh4MO98HM8RLPc
PCgcElvg0vX9DAAzEHOfxvfM07lWP5NWM92oOoGg4IdO8+j8U7e1Ywv60JyYDaK3
mP1DejUYt4cIQfJ9i1LMMQrOm7YdqV4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:40 2025 by rpki-client